Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Companys Popup Box plugin <= 2.1.2 at WordPress.
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Popup_box | Wow-estore | * | 2.1.2 (including) |